Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/jrpahJbXCCdxKrqCRM_kYGYqR0Y.roa
File: jrpahJbXCCdxKrqCRM_kYGYqR0Y.roa (raw, json)
Hash identifier: k8qRZ+HI8slQhUDfC3Dkqb1yfk6v3u5EdGuSmk4kd5Q=
Subject key identifier: 8E:BA:5A:84:96:D7:08:27:71:2A:BA:82:44:CF:E4:60:66:2A:47:46
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 0187C4A52A72492B5352A788332210E1DCEF
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/jrpahJbXCCdxKrqCRM_kYGYqR0Y.roa
Signing time: Thu 27 Apr 2023 21:36:11 +0000
ROA not before: Thu 27 Apr 2023 21:36:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13379
IP address blocks: 157.23.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:a5:2a:72:49:2b:53:52:a7:88:33:22:10:e1:dc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Apr 27 21:36:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eba5a8496d70827712aba8244cfe460662a4746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:9e:e7:3d:c3:0f:53:9b:bc:9a:85:3c:5f:
64:3c:08:23:91:d6:d2:b3:83:a4:d6:43:a9:f3:d6:
72:28:6c:16:79:cb:27:a4:b0:98:a2:49:03:ac:ec:
e0:8e:6d:41:77:f0:a9:92:94:96:d5:36:a1:52:77:
f0:4d:90:c8:f7:8f:da:2b:d0:9b:70:6b:4b:b6:b0:
93:00:cc:be:c4:a8:48:b8:0c:af:5b:90:b8:17:b8:
1f:32:d7:f8:db:e5:7c:96:5a:ab:0c:5e:86:86:9b:
04:17:ac:0b:fc:46:5b:4d:7b:76:0a:ea:97:d7:9c:
03:95:0b:66:87:46:4a:6b:f9:bb:a4:db:d5:a9:51:
cb:79:dc:bd:bf:77:47:fe:d9:72:76:e6:d2:fa:a0:
19:0e:83:c0:96:80:3f:dd:4b:af:47:a7:85:ad:cc:
98:39:40:28:92:e1:db:a6:86:fc:8c:99:fa:e3:62:
88:4f:7e:9b:65:ff:e6:45:7a:19:77:fb:1e:e6:92:
3b:9f:b1:f3:e8:84:b1:ff:2e:dc:d3:2c:d0:a0:33:
4b:d2:44:4e:33:b7:2a:2d:76:ed:6f:f1:09:61:6f:
9f:a3:d3:10:38:d2:9a:96:f7:0a:e7:4c:23:51:14:
41:08:0e:1a:21:b8:72:b3:07:96:5d:12:19:3f:4b:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BA:5A:84:96:D7:08:27:71:2A:BA:82:44:CF:E4:60:66:2A:47:46
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/jrpahJbXCCdxKrqCRM_kYGYqR0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.251.0/24
Signature Algorithm: sha256WithRSAEncryption
33:de:8f:aa:fb:30:e5:9d:73:d5:75:3b:90:ad:2b:95:77:a8:
bf:ee:f1:cf:97:f7:e8:c6:02:e2:85:77:89:58:55:80:c2:49:
ac:8a:56:1c:76:42:d8:93:6c:00:03:70:3a:80:96:eb:fd:2c:
ff:a6:9d:87:f3:37:74:b0:a7:fd:48:c7:cf:34:59:cb:6f:0c:
9b:9c:f1:9d:43:c0:41:93:6c:aa:48:f8:36:ee:8f:ec:2e:88:
fb:45:02:15:ae:1f:61:05:a3:ee:06:72:02:88:78:79:99:48:
05:64:fd:b7:be:aa:a6:3d:ae:d5:7e:d4:f9:0d:2e:21:4d:35:
8c:9d:9a:ba:2b:1a:df:90:5e:0a:29:43:10:eb:1c:20:97:1a:
7b:0d:05:92:7a:fb:ed:29:d0:37:59:98:b6:39:19:a4:50:1b:
88:99:14:ad:f2:d0:5a:b2:67:7b:2a:f6:34:73:7a:62:a0:5d:
02:b6:0f:d0:3d:49:29:23:62:c0:9b:e0:cc:82:1c:d6:3b:7d:
d3:e3:27:e2:be:11:38:a3:fe:3c:4c:51:0b:6e:c5:d4:8d:9e:
f2:ca:a9:2e:f8:17:0b:84:df:8e:6b:1c:c8:f7:ca:83:4f:86:
d3:7a:70:0c:6d:ad:1e:ce:1e:b8:3a:9e:a5:01:5b:35:d2:f7:
92:c4:9c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:15 2024 by rpki-client on console-ams.rpki-client.org